Date: Fri, 21 Apr 2000 18:16:17 +1000 From: "Andrew Reilly" <a.reilly@lake.com.au> To: Warner Losh <imp@village.org> Cc: Andrew Reilly <areilly@nsw.bigpond.net.au>, Brian Fundakowski Feldman <green@FreeBSD.ORG>, Chris Piazza <cpiazza@jaxon.net>, Brooks Davis <brooks@one-eyed-alien.net>, Shin-ichi YOSHIMOTO <yosimoto@post.kek.jp>, freebsd-current@FreeBSD.ORG Subject: Re: Anyone have OpenSSH + X11-fwd working? Message-ID: <20000421181617.A77984@gurney.reilly.home> In-Reply-To: <200004210725.BAA16026@harmony.village.org> References: <20000421103210.A42545@gurney.reilly.home> <20000420153837.A81163@norn.ca.eu.org> <Pine.BSF.4.21.0004201921230.20816-100000@green.dyndns.org> <20000421103210.A42545@gurney.reilly.home> <200004210725.BAA16026@harmony.village.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Apr 21, 2000 at 01:25:20AM -0600, Warner Losh wrote:
> In message <20000421103210.A42545@gurney.reilly.home> "Andrew Reilly" writes:
> : Have you got "X11Forwarding yes"
>
> Ahem. "ForwardX11 yes" is what's documented and is known to work.
Bzzzt. Man sshd(8):
X11Forwarding
Specifies whether X11 forwarding is permitted. The default is
``yes''. Note that disabling X11 forwarding does not improve se-
curity in any way, as users can always install their own for-
warders.
Man ssh(1):
ForwardX11
Specifies whether X11 connections will be automatically redirect-
ed over the secure channel and DISPLAY set. The argument must be
``yes'' or ``no''.
What man ssh(1) doesn't tell you in this paragraph is that even
if you say "ForwardX11 yes" in ~/.ssh/config, you will not get
a proxy X session unless the server has "X11Forwarding yes" in
/etc/ssh/sshd_config. The default that my system configured
itself with was "X11Forwarding no", and I've just changed it,
and now it works.
That's what I found out as a result of this conversation.
--
Andrew
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20000421181617.A77984>